CVE PROGRAM SOURCE RECORDUnscored
CVE-2017-1000228
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function
- Status
- Published
- Published
- Updated
- Assigning organization
- mitre
Description
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.